Table of Contents

How to setup SCIM

Yasuhiro Miyoshi Updated by Yasuhiro Miyoshi

Translation Disclaimer: The documents herein have been machine translated for your convenience by translation software. While reasonable efforts are made to provide accurate translations, portions may be incorrect. If you would like to report a translation error or inaccuracy, we encourage you to please contact us.

SAML must be enabled in order to use SCIM. Please see the SAML Setup Guidelines to enable SAML.

Get SCIM certification information for organizations

Go to the Organization Settings screen at Settings > SAML/SCIM . If you do not have a secret token yet, press the Generate button. Since there is only one SCIM secret token per organization, if you generate a new token, the previously generated one will expire.

Activate SCIM on the IdP side

Open the application you created for SAML in IdP.

ใ€€ใ€€ใ€€ใ€€ใ€€ใ€€ใ€€ใ€€ใ€€ใ€€ใ€€ใ€€ใ€€ใ€€ใ€€ใ€€ใ€€ใ€€

Azure AD

  • Azure AD Guide

Select Provisioning in the side menu and click the Get Started button.

Select Automatic mode.

Enter the tenant URL and secret token obtained from the IT Management Cloud.

Click the Save button in the upper left corner to save the settings.

There is no need to store and manage Secret Tokens in a separate location.If a new one is needed, it can be re-generated.

Next, open Mappings and deactivate provisioning for the group.

Select Provision Azure Active Directory Users and click Azure Active Directory Attribute should be set as follows.

Check that the Matching precedence for userPrincipleName is set to 1.

Click the Save button in the upper left again and you are done ๐ŸŽ‰.

Assigning users to the application will automatically provision it to the IT Management Cloud.

Okta

Features
  • Create new user: When a user is created in Okta, the user is also created in the IT Management Cloud.
  • Update user profiles: User information updated in Okta is reflected in the IT Management Cloud.
  • Disable (reactivate) and delete users: When a user is disabled, reactivated, or deleted in Okta, the result is also reflected in the IT Management Cloud.

ใ€€

Requirements

SAML must be enabled in order to use SCIM. Please see the SAML Setup Guidelines to enable SAML.

ใ€€ใ€€ใ€€

Configuration Steps

1.Select your application from Apprications and change the Application username format to Emailon the Sign on tab.

2. On the General tab, under Provisioning, select Enable SCIM provisioning.

3.Open the Provisioning tab and enter the following information

  • SCIM connector base URL : Input the Tenant URL from IT Management Cloud
  • Unique identifier field for user : userName
  • Supported provisioning actions : Check the following value
    • Import New Users and Profile Updates
    • Push New Users
    • Push Profile Updates
  • Authentication Mode : HTTP Header
  • Authorization : Secret Token from IT Management Cloud

4. Press Test Connector Configuration and verify that all but Push groups and Import groups succeed. If successful, Close and save the file.

5.ๆฌกIn the To App section of the next screen, activate the following

  • Create Users
  • Update User Attributes
  • Deactivate Users

ใ€€

6. On the same screen, scroll further down to the Attribute Mappings section. Set the same settings as in the screenshot.

ใ€€

7. That's all done. ๐ŸŽ‰ ใ€€When a user is assigned to an application, it is automatically provisioned in the IT management cloud.

ใ€€

Known Issues / Troubleshooting
IT Management Cloud does not yet support provisioning or import from Apps to Okta, so please leave the "To Okta" setting at default (disabled).

ใ€€

OneLogin

  • OneLogin Guide

Open the Configuration page. Enter the following values.

  • SCIM Base URL: Enter the tenant URL obtained from the IT Management Cloud.
  • SCIM Bearer Token: Enter the Secret Token obtained from the IT Management Cloud.

Press the Enable button to activate. If there is no error, press Save to save.

Next, open the Provisioning page.

Activate Enable provisioning.

Optionally, you can change the behavior when a user is deleted in OneLogin.

Save the settings.

That's all done ๐ŸŽ‰.

Assign users to the application and it will be automatically provisioned in the IT Management Cloud.

How did we do?

How to calculate prices

How to setup SCIM (Okta Integration Network)

Contact